use profiles

ALTER USER sms WITH LOGIN = sms;

create USER Terminal for LOGIN  Terminal;
CREATE ROLE [TerminalRole] AUTHORIZATION [dbo]
EXEC dbo.sp_addrolemember @rolename=N'TerminalRole', @membername=N'Terminal'
EXEC dbo.sp_addrolemember @rolename=N'Browser', @membername=N'Terminal'

GRANT SELECT TO Browser